$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.mft File: V9tCq56777_iEHP1AH_Ddixfuwg.mft (raw, json) Hash identifier: znCSwjydTBFrbxhuzJwX8vrh+z6L3zArPeh21KPOmZo= Subject key identifier: 1C:EC:2A:0B:1D:2E:51:4A:8D:35:48:78:15:A5:39:6B:82:9E:31:84 Authority key identifier: 57:DB:42:AB:9E:BB:EF:BF:E2:10:73:F5:00:7F:C3:76:2C:5F:BB:08 Certificate issuer: /CN=A91CA297/serialNumber=57DB42AB9EBBEFBFE21073F5007FC3762C5FBB08 Certificate serial: 08EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V9tCq56777_iEHP1AH_Ddixfuwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.mft Manifest number: 08E8 Signing time: Sun 02 Nov 2025 20:19:10 +0000 Manifest this update: Sun 02 Nov 2025 20:19:10 +0000 Manifest next update: Sun 09 Nov 2025 20:19:10 +0000 Files and hashes: 1: V9tCq56777_iEHP1AH_Ddixfuwg.crl (hash: BbndbRZ0sScXftHCHYrUWqT29bBIuFVBXUN0CcYrZAg=) 2: 19EF4D1ABE5A11EDAA537748C4F9AE02.roa (hash: miZMhJRep9ETR17YW7gWoj6LqwgVkbNzRlMxX+ZmBhQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.crl rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V9tCq56777_iEHP1AH_Ddixfuwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:19:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2287 (0x8ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA297, serialNumber=57DB42AB9EBBEFBFE21073F5007FC3762C5FBB08 Validity Not Before: Nov 2 20:19:10 2025 GMT Not After : Nov 9 20:19:10 2025 GMT Subject: CN=6907bcbe-b5c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:00:f8:f6:ce:3c:79:1d:18:b1:52:99:da:0a: 6c:a9:7a:3c:63:e9:a8:2f:2c:24:48:55:a9:5a:1e: de:d5:dc:0f:5c:ee:14:76:db:68:74:f9:a7:53:1e: 3a:cd:33:40:c4:0c:17:66:ba:bb:67:7b:cc:6e:44: 16:e7:66:6f:49:0d:63:1b:c3:8d:d1:8a:62:da:a3: 5a:4f:1c:bc:71:cd:6d:96:e6:b5:94:39:05:af:52: 2c:06:13:db:2f:ee:f2:14:0c:4d:d1:ae:6b:12:16: 46:88:7d:fc:86:15:61:58:e4:eb:c3:09:69:a2:83: a0:d4:5d:9f:f8:0a:22:2c:52:ee:4b:b2:23:69:7f: bd:91:42:82:fd:f7:51:60:47:0c:69:60:79:cb:d7: be:d7:8d:4a:82:a7:92:ba:4a:67:97:e8:9d:a7:e7: af:8b:bb:d5:4e:c1:b6:cc:73:33:c7:b5:91:eb:8b: c4:a8:7c:4f:77:3e:b3:6b:9c:ea:f6:ec:17:06:1e: b3:02:42:5c:45:6e:4c:ae:6e:24:3e:4a:7d:18:90: 67:88:9d:f9:45:f1:38:b8:35:2e:da:9d:8e:8c:5a: c5:91:ed:7b:82:f8:25:90:e9:15:b4:9c:3c:30:c2: 86:d2:06:ba:ea:74:8a:5b:65:29:d7:d4:e7:e6:bb: ba:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:EC:2A:0B:1D:2E:51:4A:8D:35:48:78:15:A5:39:6B:82:9E:31:84 X509v3 Authority Key Identifier: keyid:57:DB:42:AB:9E:BB:EF:BF:E2:10:73:F5:00:7F:C3:76:2C:5F:BB:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V9tCq56777_iEHP1AH_Ddixfuwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:4b:aa:ff:2f:96:54:87:02:45:65:69:3c:93:af:cc:67:ef: b6:b1:c7:00:49:77:85:3e:19:ab:a4:44:7f:a5:72:ed:c7:3b: 2b:f7:4c:7b:c1:eb:f2:f8:7a:8f:9c:55:e2:5d:2c:ea:9d:65: 36:ae:07:a9:ca:54:6c:29:99:64:1f:c8:09:89:fe:c6:8c:ac: 38:67:d6:f2:b0:72:ec:bd:a2:b1:1a:be:3b:9f:cc:14:17:08: 60:aa:2d:c6:62:9c:1a:2f:c1:5e:e2:79:46:2c:82:4b:22:7e: bb:2e:bf:bc:1d:22:29:88:ee:fb:6e:fa:35:42:5d:04:ff:e1: 7a:5c:e6:18:41:75:1a:96:74:38:b3:22:2b:ab:23:86:98:75: 56:0b:6a:c2:b1:b4:d1:1c:e5:9b:61:c8:84:8b:dd:cb:3b:af: a8:02:83:10:9a:89:9f:f0:f4:98:1e:2e:af:51:aa:2a:e8:12: 4b:68:f2:b4:37:91:94:f9:9a:62:5e:13:20:bc:9d:e1:af:57: c7:98:54:3c:ab:b2:ce:c7:c5:ef:c5:39:91:5d:90:bf:5e:af: 57:0b:bb:63:bb:1e:f2:6f:d6:d8:7b:06:59:8e:9b:e0:0f:d4: 28:ef:76:9d:b2:02:87:71:b3:2d:34:34:bc:0b:25:5b:d4:3e: 1f:52:8b:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0EyOTcxMTAvBgNVBAUTKDU3REI0MkFCOUVCQkVGQkZFMjEwNzNGNTAwN0ZDMzc2 MkM1RkJCMDgwHhcNMjUxMTAyMjAxOTEwWhcNMjUxMTA5MjAxOTEwWjAYMRYwFAYD VQQDEw02OTA3YmNiZS1iNWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAswD49s48eR0YsVKZ2gpsqXo8Y+moLywkSFWpWh7e1dwPXO4UdttodPmnUx46 zTNAxAwXZrq7Z3vMbkQW52ZvSQ1jG8ON0Ypi2qNaTxy8cc1tlua1lDkFr1IsBhPb L+7yFAxN0a5rEhZGiH38hhVhWOTrwwlpooOg1F2f+AoiLFLuS7IjaX+9kUKC/fdR YEcMaWB5y9e+141KgqeSukpnl+idp+evi7vVTsG2zHMzx7WR64vEqHxPdz6za5zq 9uwXBh6zAkJcRW5Mrm4kPkp9GJBniJ35RfE4uDUu2p2OjFrFke17gvglkOkVtJw8 MMKG0ga66nSKW2Up19Tn5ru60QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBzsKgsd LlFKjTVIeBWlOWuCnjGEMB8GA1UdIwQYMBaAFFfbQqueu++/4hBz9QB/w3YsX7sI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTI5Ny8yNEVEMjE1NkJD MjgxMUVBOTdGOTZENDFDNEY5QUUwMi9WOXRDcTU2Nzc3X2lFSFAxQUhfRGRpeGZ1 d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Y5dENxNTY3NzdfaUVIUDFBSF9EZGl4ZnV3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QTI5Ny8yNEVEMjE1NkJDMjgxMUVBOTdGOTZENDFDNEY5QUUwMi9WOXRDcTU2Nzc3 X2lFSFAxQUhfRGRpeGZ1d2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKS6r/L5ZUhwJFZWk8k6/MZ++2sccASXeFPhmrpER/pXLtxzsr90x7 wevy+HqPnFXiXSzqnWU2rgepylRsKZlkH8gJif7GjKw4Z9bysHLsvaKxGr47n8wU Fwhgqi3GYpwaL8Fe4nlGLIJLIn67Lr+8HSIpiO77bvo1Ql0E/+F6XOYYQXUalnQ4 syIrqyOGmHVWC2rCsbTRHOWbYciEi93LO6+oAoMQmomf8PSYHi6vUaoq6BJLaPK0 N5GU+ZpiXhMgvJ3hr1fHmFQ8q7LOx8XvxTmRXZC/Xq9XC7tjux7yb9bYewZZjpvg D9Qo73adsgKHcbMtNDS8CyVb1D4fUouI -----END CERTIFICATE-----Generated at Mon Nov 3 10:36:51 2025 by rpki-client